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CLASSIFIED DECLARATION OF LTCEN. KEITH IT ALEXANDER 
NATIONAL SECURITY AGENCY 

(U) 1, Lieutenant General Keith B. Alexander, do hereby state and declare as follows: 

L (U) Introduction 

1 , (U) I am the Director of the National Security Agency (NSA), an intelligence 
agency within the Department of Defense. 1 am responsible for directing the NSA, overseeing the 
operations undertaken to carry out its mission and, by specific charge of the President and the 
Director of Naiional Intelligence, protecting NSA activities and intelligence sources and methods. 

I have been designated an original TOP SECRET classification authority under Executive Order 
No. 12958, 60 Fed. Reg, 19825 (Apr. 17, 1995), as amended by Executive Order No. 13292, 68 
Fed. Reg. 15315 (Mar. 25, 2003) (reprinted in 3 C.F.R. 2003 Comp, at 196 and at 50 U.S.C.A. 

§ 435 (Supp. 2009)), and Department of Defense Directive No. 5200.1 -R, Information Security 
Program Regulation, 32 C.F.R. § 1 59a. 12 (2000). 

2 , (U) The purpose of this declaration is to support an assertion of the military and 
state secrets privilege (hereafter "stale secrets privilege’') by the Director of National Intelligence 
(DN1) as the head of the intelligence community, as well as the DNI's assertion of a statutory 
privilege under the National Security Act. Specifically, in the course of my official duiies, I have 
been advised of this litigation and the allegations in the plaintiffs' Amended Complaint As 
described herein, various classified facts related to the plaintiffs* claims are subject to the DNI’s 
state secrets privilege assertion. The disclosure of information discussed throughout this 
declaration, which relates to NSA intelligence information, activities, sources, methods, and 
rclaiionships, reasonably could be expected to cause exceptionally grave damage to the national 
security of the United States. In addition, it is my judgment that sensitive slate secrets are so 







central in the subject matter of the litigation Thai any atlempt to proceed in the case risks the 
disclosure of the secrets described herein and exceptionally grave damage to the national security 
of the United States. Through this declaration, 1 also hereby invoke and assert the NS A's 
statutory privilege set forth in section 6 of the National Security Agency Act of 1 959, Public Law 
No. 86-36 (codified as a note to 50 U.S.C. § 402) ("NSA Act"), to protect the information related 
to NS A activities described below. The statements made herein are based on my personal 
knowledge of NSA activities and operations, and on information available to me as Director of 



the NSA. 



II, (U) Summar 



3. (U) ] have reviewed the Amended Complaint in this case. Plaintiffs allege, in 

sum, that, after the 9/1 I attacks, the NSA received presidential authorization to engage in 
surveillance activities far broader than the publicly acknowledged “Terrorist Surveillance 
Program” (“TSP"), which was limited to the interception of sped He international 
communications involving persons reasonably believed to be associated with al Qaeda and 
affiliated terrorist organizations. Plaintiffs allege that the NSA, with the assistance of 
telecommunications companies, Amended Com pi. ^ 5-8, conducts a '"dragnet” surveillance 
program involving the interception of "virtually every telephone, internet and/or email 
communication that has been sent from or received within the United States since 2001” as part 
of an alleged Presidential ly-avtthorized ‘'program" after 9/11, id. ^1,4. 1 cannot disclose on the 
public record the nature of any NSA information implicated by the plaintiffs’ allegations. 
However, as described further below, the disclosure of information related to the NSA's 
activities, sources and methods implicated by the plaintiffs' allegations reasonably could be 
expected to cause exceptionally grave damage to the national security of the United States and, 
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for this reason, are encompassed by the DNI’s state secrets and statutory privilege assertions, as 
well as by my own statutory privilege assertion, and should be protecled from disclosure in this 
cose. In addition, it is my judgment that sensitive state secrets are so central to the subject matter 
of the litigation that any attempt to proceed in the case risks the disclosure of the classified 
privileged national security information described herein and exceptionally grave damage to the 
national security of the United States. 

4. -f T - S V/ : P $ - F V / S4 //OC/N F) The allegations in this lawsuit put at issue the disclosure 
of information concerning several highly classified and critically important NSA intelligence 
activities that commenced after the 9/1 1 terrorist attacks, but which are now being conducted 
pursuant to authority of the Foreign Intelligence Surveillance Act (“FISA"). including ongoing 
activities conducted under orders approved by the Foreign Intelligence Surveillance Court 
("FISC"). Plaintiffs’ allegation that the NSA undertakes indiscriminate surveillance of the 
content of millions of communications sem or received by people inside the United States - 
under the now defunct-TSP or otherwise - is false, as discussed below. Likewise, the plaintiffs' 
allegations that telecommunications companies assisted with the alleged dragnet program are 
false, because the alleged dragnet does not exist. The NSA's collection of the content of 
communications under the TSP was directed at international communications in which a 
participant was reasonably believed to be associated with al Qaeda or an affiliated organization 
arid did not constitute the kind of dragnet collection of the content of millions of Americans' 
telephone or Internet communications that the plaintiffs allege. Although the existence of the 
TSP has been acknowledged, the details of that program remain highly classified, along with 

1 fFSy/S f//NF) The term "content” is used in this Declaration to refer to the substance, 
meaning, or purport of a communication, as defined in 18 U.S,C. § 2510(8), as opposed to the 
type of addressing or routing information referred throughout this declaration as "meta data." 
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details of related content surveillance activities undertaker after theTSP ended pursuant to 
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orders of the FISC. This information could not be disclosed to address or disprove or otherwise 
litigate the plaintiffs' allegation of a content dragnet without causing exceptional harm to NSA's 
sources and methods of gathering intelligence - including methods currently used to detect and 
prevent funher terrorist attacks under the authority of the FISA. 

5. ( T ^/T& E V/ S FVOC/N F) In addition, as the Court is aware from prior classified 

declarations submitted by ihe NSA in this and related proceedings, the NSA has collected, 
pursuant to presidential authorization and currently under subsequent FISC orders, non-content 
information (/.<?.. meta data) about telephone and Internet communications in order to enable 
highly sophisticated analytical tools that can uncover the contacts of 

members or agents As above and 

detailed below, the content surveillance subject to presidential authorization after 9/1 1 was not 
the content dragnet surveillance that plaintiffs allege, and the collection of non-content 
information, while significant in scope, remains a highly classified matter currently under FLS A 
authorization. For the NSA to attempt to explain, clarify, disprove, or otherwise litigate 
plaintiffs* allegations regarding a communications dragnet would require the NSA to confirm the 
existence of, or risk disclosure of facts concerning, intelligence sources and methods for the 
collection of non-content information related to communications, as well as current NSA 
operations under FISC Orders - disclosures that would cause exceptionally grave harm to 
national security. 

2 (TS // S LVOC/N F ) Certain FISC Orders are also directed at| 

Because the allegations in the complaint reference act ivities 
authorized after 9/1 1 were directed any 

further references to the FISC Orders will focus solely on activities under the orders directed at 
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I. The fact that there has been public speculation 
about alleged NSA activities does not diminish the need to protect intelligence sources and 
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methods from further exposure. Official confirmation and disclosure of the classified privileged 
national security information described herein would cause exceptionally grave damage to the 
national security. For these reasons, as set forth further below, 1 request that the Court uphold 
the stale secrets and siatutory privilege assertions that the DNI and 1 now make, and protect the 
information described in this declaration from disclosure. 

111. fLD Class iflcation of Declaration 
8. ( S riStW-F) This declaration is classified TOP SECR£T//TSP//SlB 



^^^//ORCON/NOFORN pursuant to the standards in Executive Order No. 12958, as amended 
by Executive Order No. 1 3292. Under Executive Order No. 1 2958, information is classified 
“TOP SECRET' if unauthorized disclosure of the information reasonably could be expected to 
cause exceptionally grave damage to the national security of the United States; “SECRET' if 
unauthorized disclosure of the information reasonably could be expected to cause serious 
damage to national security; and “CONFIDENTIAL'' if unauthorized disclosure of the 
information reasonably could be expected to cause identifiable damage to national security. At 
the beginning of each paragraph of this declaration, the letter or letters in parentheses 
designate^) the degree of classification of the information the paragraph contains. When used 
for this purpose, the letters “U," a CT “S," and “TS" indicate respectively that the information is 
either UNCLASSIFIED, or is classified CONFIDENTIAL, SECRET, or TOP SECRET 3 . 
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1 3. f T S // * vbW F) Signals intelligence (SIG1NT) consists of three sub categories: 

( 1) communications intelligence (COMINT); (2) electronic intelligence (FLINT); and (3) foreign 
instrumentation signals intelligence (FISfNT). Communications intelligence (COM FNT) is 
defined as "all procedures and methods used in ihe interception of communications and the 
obtaining of information from such communications by other than the intended recipients.” 1 8 
U.S.C. § 798- COMfNT includes information derived from the interception of foreign and 
international communications, such as voice, facsimile, and computer-to-computer information 
conveyed via a number of means | 

Electronic intelligence (EUNT) is technical intelligence information derived from 
foreign non- comm unicat ions electromagnetic radiations except atomic detonation or radioactive 
sources - in essence, radar systems affiliated with military weapons platforms (e.g.. anti-ship) 
and civilian systems (e.g., shipboard and air traffic control radars). Foreign instrumentation 
signals intelligence (F1S1NT) is derived from non-U. S. aerospace surfaces and subsurface 
systems which may have either military or civilian applications. 

14. (U) The NSA's S1GFNT responsibilities include establishing and operating an 
effective unified organization to conduci S1GPNT activities set forth in E.O, No. 12333, 

§ 1 .12(b), as amended. In performing its SIGINT mission, NSA has developed a sophisticated 
worldwide SIGrNT collection network. The technological infrastructure that supports theNSA’s 
foreign intelligence information collection network has taken years to develop at a cost of 
billions of dollars and untold human effort. It relies on sophisticated collection and processing 
technology. 



signals intelligence information for foreign intelligence and counterintelligence purposes to 
support national and departmental missions.” 
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)5. (LT) There are two primary reasons for gathering and analyzing foreign 
intelligence information. The first, and most important, is to gam information required to direct 
L\S. resources as necessary to counter external threats and in support of military operations. The 
s<^nd reason is to obtain information necessary to the formulation of U.S. foreign policy. 

Foreign intelligence information provided by the NSA is thus relevant to a wide range of 
important issues, including military order of baltle; threat warnings and readiness; arms 
proliferation; international terrorism; counter-intelligence; and foreign aspects of international 
narcotics trafficking. 

16. (11) Foreign intelligence produced by COMINT activities is an extremely 

important part of the overaJl foreign intelligence information available to the United States and is 
often unobtainable by other means. Public disclosure of either the capability to collect speci fic 
communications or the substance of the information derived from such collection itself can 
easily alert targets to the vulnerability of their communications. Disclosure of even a single 
communication holds the potential of revealing intelligence collection techniques that are applied 
against targets around the world. Once alerted, targets can frustrate COMINT collection by 
using different or new encryption techniques, by disseminating disinformation, or by utilizing a 
different communications link. Such evasion techniques may inhibit access to the target’s 
communications and therefore deny the United States access to information crucial to the 
defense of the United States both at home and abroad. COM1NT is provided special statutory 
protection under 18 U.S.C. § 798, which makes it a crime to knowingly disclose to an 
unauthorized person classified information “concerning ihe communication intelligence activities 
of the United States or any foreign government.'’ 
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B. (U) September 1 U 2001 and the al Qaeda Threat 

1 7. (U) On September 1 1 , 2001 , the al Qaeda terrorist network launched a set of 
coordinated attacks along the East Coast of the United States. Hour commercial jetliners, each 
c.jtrefully selected to be fully loaded with fuel for a transcontinental flight, were hijacked by a l 
Qaeda operatives. Those operatives targeted the Nation’s financial center in New York with two 
of the jetliners, which they deliberately flew into ihe Twin Towers of the World Trade Center 
Al Qaeda targeted the headquarters of the Nation's Armed Forces, the Pentagon, with the third 
jetliner. Al Qaeda operatives were apparently headed toward Washington, D.C. with the fourth 
jetliner when passengers struggled with the hijackers and the plane crashed in Shanksvillc, 
Pennsylvania. The intended target of Ihis fourth jetliner was most evidently the White House or 
the Capitol, strongly suggesting that al Qaeda’s intended mission was to strike a decapitaiion 
Mow to the Government of the United States — to kill the President, the Vice President, or 
Members of Congress. The attacks of September ! 1 resulted in approximately 3,000 deaths — 
tiie highest single-day death toll from hostile foreign attacks in the Nation’s history. In addition, 

^ these attacks shut down air travel in the United Stales, disrupted the Nation's financial markets 
and government operations, and caused billions of dollars of damage lo the economy. 

1 8. (U) On September 14, 2001 , a national emergency was declared l T>y reason of the 
terrorist attacks at the World Trade Center, New York, New York, and the Pentagon, and the 
continuing and immediate threat of further attacks on the United States.” Presidential 
Proclamation No. 7463, 66 Fed. Reg. 48199 (Sept. 14, 2001). The United States also 
immediately began plans for a military response directed at al Qaeda's training grounds and 
havens in Afghanistan. On September 14, 2001, both Houses of Congress passed a Joint 
Resolution authorizing the President of the United States '"to use all necessary and appropriate 
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force against those nations, organizations, or persons he determines planned, authorized, 
committed, or aided the terrorist attacks" of September 1 1 . Authorization for Use of Military 
Force, Pub. L. No. 107-40 § 21(a), 1 15 Stat. 224. 224 (Sept. IS, 2001). Congress also expressly 
acknowledged that the atiacks rendered it ''necessary and appropriate” for the United States to 
exercise its right “to protect United States citizens both at home and abroad,” and acknowledged 
in particular that “the President has authority under the Constitution to take action to deter and 
prevent acts of international terrorism against the United States." Id, pmbh 

19. (U) Also after the 9/1 1 attacks, a Military Order was issued staling that the attacks 
of September 1 1 “created a state of armed conflict," %ee Military Order by the President § 1(a), 

66 Fed. Reg. 57833, 57833 (Nov. 13, 2001). and that al Qaeda terrorists 4 ‘possess both the 
capability and the intention to undertake further terrorist attacks against the United States that, if 
not detected and prevented, will cause mass deaths, mass injuries, and massive destruction of 
properly, and may place at risk the continuity of the operations of the United States 
Government,” and concluding that “an extraordinary emergency exists for national defense 
purposes,” id. § 1(c), (g), 66 Fed. Reg. at 57833-34. Indeed, shortly after the attacks, NATO 
look the unprecedented step of invoking article 5 oflhe North Atlantic Treaty, which provides 
that an “armed attack against one or more of (the parties] shall be considered an anack against 
them all.” North Atlantic Treaty, Apr. 4. 1949, art. 5, 63 Stat. 2241 , 2244, 34 U.N.T.S. 243, 246, 

20. (U) As a result of the unprecedented attacks of September 1 1 , 200 1 , the United 
States found itself immediately propelled into a worldwide war against a network of terrorist 
groups, centered on and affiliated with al Qaeda, that possesses the evolving capability and 
intention of inflicting further catastrophic attacks on the United States. That war is continuing 
((►day, at home as well as abroad. Moreover, the war against al Qaeda and its allies is a very 




different kind of war* against a very different enemy, than any other war or enemy the Nation has 
previously faced. Al Qaeda and its supporters operate not as a traditional nation-state but as a 
diffuse, decentralized global network of individuals, cells, and loosely associated* often disparate 
groups, that act sometimes in concert, sometimes independently, and sometimes in the United 
States, but always in secret - and their mission is to destroy lives and to disrupt a way of li fe 
through terrorist acts. A l Qaeda works in the shadows; secrecy is essential to al Qaeda’s success 
in plotting and executing iis terrorist attacks. 

2 1 . The Classified In Camera, Ex Parte Declaration of Dermis C. Blair, 

Director of National Intelligence, details the particular facets of the continuing al Qaeda threat 
and, thus, the exigent need for the NSA intelligence activities described here. The NSA 
activities are directed at that threat, ( 

^Global telecommunications networks, especially the Internet, have 
developed in recent years into a loosely interconnected system — a network of networks — that is 
ideally suited for the secret communications needs of loosely affiliated terrorist cells. Hundreds 
of Internet service providers, or ,v fSPs, M and other providers of communications services offer a 
wide variety of global communications options, often free of charge. | 




Classified In Camera. Ex Pane Declaration of Lt. Gen Kcilh B. Alexander, Director. National Security Agency I S 

y.r^inia Shube/t eta!, v. Untied Staley of America, et al (No 07-cv-6M3-VRW; MDL No. 06-1^91) 



" POP SLC I H H -HyP 











22 . 




16 

17 



IS 

19 



2u 

21 

22 

23 

24 

25 

26 
27 
2* 



23. Our efforts against al Qaeda and its affiliaics therefore present 

critical challenges for the Nation's communications intelligence capabilities. First* in this new 
kind of war, more than in any other we have ever faced, communications intelligence is essential 
to our abiliiy to identify the enemy and to detect and disrupt its plans for further attacks on the 
United Stales, Communications intelligence often is the only means we have to learn the 
identities of particular individuals who arc involved in terrorist activities and the existence of 
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particular terrorist threats. Second, at the same lime that communications intelligence is more 
important than ever, the decern ra I i zed, non-hierarchical nature of the enemy and their 
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sophistication in exploiting the agility of modem telecommunications make successful 
communications intelligence more difficult than ever. It is against this backdrop that the risks 
presented hy this litigation should be assessed, in particular the risks of disclosing particular 
NSA sources and methods implicated by the claims. 

C. (U) Summary of NSA Activities After 9/1 1 to Meet al Qaeda Threat 

24. (TJ) After the September 1 1 attacks, the NSA received presidential authorization 
and direction to detect and prevent further terrorist attacks within the United Slates by 
intercepting the content 7 of communications for which there were reasonable grounds to believe 
that (l) such communications originated or terminated outside the United States and (2) a party 
to such communication was a member or agent of al Qaeda or an affiliated terrorist organization. 
The existence of tins activiiy was disclosed by then -Pres id cot Bush in December 2005 (and 
subsequently referred to as the 'Terrorist Surveillance Program" or ll TSP").* 

25. fTS/Z TSfi VS 17/ OC/ N F) In more specific and classified terms, the NSA has 
utilized a number of critically important intelligence sources and methods to meet the threat of 
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a nother mass casualty terrorist attack on the United States - methods that were designed to work 
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7 (TJ) The term “content' 1 is used in this Declaration to refer to the substance, meaning or 
purport of a communication, as defined in 1 8 U.S.C § 2510(8). 



24 

15 

26 

27 

28 



6 (U) On January 1 7, 2007, the Government made public the general facts that new 
orders of the Foreign Intelligence Surveillance Court had been issued that authorized the 
Government to target for collection international communications into or out of the United States 
where iherc is probable cause to believe that one of the communicants is a member or agent of al 
Qaeda or an associated terrorist organization; thai, as a result of these orders, any electronic 
surveillance that had been occurring as part of the TSP was then being conducted subject to the 
approval of the FISA Court; and that, under these circumstances, the TSP was not reauthorized. 
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iii tandem and continue to this day under authority of die FISA. As noted above, one such 
method involved the program publicly acknowledged by then -President Bush as the TSP, in 
which the NS A intercepted the content of telephone and Internet communications pursuant to 
presidential authorization 9 As described further below, under the TSP, NSA did not engage in 
plaintiffs' ajleged dragnet surveillance of communication content, but intercepted the content of 
particular communications where reasonable grounds existed to believe one party involved a 
member or agent of al Qaeda or affiliated terrorist organization based on particular ‘"selectors” 
(phone numbers or Internet addresses) associated with that target. In addition to collecting the 
content of particular communications, the NSA has also collected non-coniem communication 
information known as "meta data,” Specifically, afler ihe 9/1 1 attacks, the NSA collected bulk 
meta data related to telephony communications for (he purpose of conducting targeted analysis to 
track al Qaeda-related networks. Telephony meta data is information derived from call detail 
records that reflect non-content information such as, but not limited to, the date, lime, and 



(TS//TSfY/Sfr^J^^^WG/NFKThe first presidential authorization of the TSP was 
on October 4, 2001 , and the TSP was reauthorized approximately every 30-60 days throughout 
the existence of the program. The documents authorizing the TSP also contained the 
authorizations for the meta data activities described herein. The authorizations, moreover, 
evolved over time, and during certain periods authorized other activities (this Declaration is not 

intended to and does not f ully describe the authorizations and the differences in those 

authorizations over time). | 



^pe^Classified In Camera , Ex Parte Declaration of LTG Keith B. Alexander ^ 62, 
MDLNo. 06-1 791 -VRW (N.D. Ca l T (submitted Ann 20, 20Q7 1 ! (relating to all actions against 
the MCI and Verizon Defendants 



Pacified In Ounero, F<c Farte Declaration of Lt. Gen. Keith B Alexander, Director. National Sccuncy Agency 18 

Virginia Shubert, cl at . > J , t/u tied Stales cf America, ct al (No. 07-cv-693-VRW; MDI. No. 06-P91 ) 





duration of telephone calls, as well as the phone numbers used to place and receive the calls. Tn 
addition, since the 9/! 1 attacks, the NSA has collected bulk meta data related to Internet 



communications. Internet meta data is beadcr/rou ter/ addressing information, such as the ‘Ho. M 
“From,*' and “bcc" lines, as opposed to the body or l4 re T ' lines, of a standard email. 

26. C/N F) Each of the foregoing activities continues in some form under 

authority of the FISA and, thus, the NSA utilises the same intelligence sources and methods 
today to detect and prevent further terrorist attacks that n did after the 9/1 1 attacks. First, as 
noted above, on January ! 0, 2007, the FISC issued two orders authorizing the Government to 
conduct certain electronic surveillance that had been occurring under the TSP. The FISC Orders 
were implemented on January 17, 2007, and, thereafter, any electronic surveillance that had been 
occurring as part of the TSP became subject to the approval of the FISC and the TSP was not 



I reauthorized. 
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As also described further, see infra 63-66, the FISC extended 
these orders with some modifications. What is described below as the Foreign Telephone and 
Email Order expired in August 2007 and was supplanted by authority enacted by Congress - First 
under the Protect America Act and then the FISA Amendments Act of 2008 - to authorize 
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27. (T S y/Sl//OC/NF) Second, wtth respect to The collection of telephony meta data, 
since May 2006 certain telecommunication providers have been required by an order of the FISC 
to produce to thcNSA on a daily basis all telephony meta data that they create (“FISC Telephone 
Business Records Order”) The FISC Telephone Business Records Order has been reauthorized 
approximately every 90 days since it was first issued. Although this collection is broad in scope, 
the NSA was authorized by the FISC to query the archived telephony data with identified 
telephone numbers for which there are facts giving rise to a reasonable, articulable suspicion that 



the number is associated with 



(hereafter referred to 



as a “RAS" determination). 12 Historically, only a liny fraction of telephony meta data records 
collected by the NSA has actually been presented to a trained professional for analysis. As 
discussed further below, see infra 48-56, while the vast majority of records arc thus never 
viewed by a human at the NSA, it is still necessary to collect the meta data in bulk in order to 



foreign intelligence surveillance of targets located overseas without individual court orders. 

12 fTS7/S iff€>GAN F) As set forth further below, see infra 60-62, NSA's compliance 
with this limitation in ihe FISC Order has been subject to further proceedings in the FfSC that 
commenced with a compliance report by the government on January 15, 2009, which indicated 
that the NSA had also been querying incoming telephony meta data with selectors for 
counterterrorism targets subject to NSA surveillance under Executive Order 12333, as to which 
the NSA had not made a “RAS” determination. On March 2, 2009, the FISC renewed the Order 
authorizing the bulk provision to NSA of business records containing lelephony meta data from 
telecommunications carriers, but subjected that activity to new limitations, including that the 
NSA may query the meta data only after a motion is granted on a case-by-case basis (unless 
otherwise necessary to protect against imminent threat to human life). The FISC also required 
the Government to report to the FISC on its review of revisions to the meta data collection and 
analysis process and to include affidavit describing the value of the collection of telephony meta 
data authorized by the FISC Telephone Business Records Order. The Government submitted its 
report to the FISC as required on August 17, 2009. The FISC subsequently renewed the 
Telephone Business Records Order on September 3, 2009, and, in so doing, restored to NSA the 
authority to make RAS determinations for sele ctors that NSA coun terterrorism personnel 
nominate for analysis through contact chaining^^^^^^^^^|( these selectors are described 
as “seeds”). This renewed Order expires on October 30, 2009. 
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utilise sophisticated and vital analytical tools for tracking the contacts 



for protecting the national security of the United Stales, 

28. (TS//SI//OC/NF) Third, beginning in July 2004, the collection of internet meta 
data in bulk has been conducted pursuant to an order of the FISC authorizing the use of a pen 
register and irap and trace device C'FISC Pen Register Order'* or “PRTT Order’*). See 1 8 U.S.C. 
§ 3 1 27 (defining lv pen register’* and 'trap and trace device”). Pursuant to the FISC Pen Register 
Order, which has been reauthorized approximately every 00 days since it was first issued, the 
NSA is authorized to collect, in bulk, meta data associated with electronic communications 
on the Intemei. 13 I 



Although tlie NSA collects email meta data in bulk 
| it has been authorized by the FISC to query the archived meta data only using email 
addresses for which there are facts giving rise to a reasonable, articulable suspicion that the email 



address is associated witk 



As with bulk telephony 



meta data collection, bulk Internet meta data collection is necessary to allow the NSA to use 
critical and unique analytical capabilities to track the contacts (even retrospectively) 

known terrorists. Like telephony meta data activities, Internet meta 
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data collection and analysis are vital tools for protecting the United States from attack, and, 
accordingly, information pertaining to those activities is highly classified, 14 



V. (U) Information Protected bv Privilege 

29. (U) In general and unclassified terms, the following categories of information are 

subject to the DNl’s assertion of the state secrets privilege and statutory privilege under the 

National Security Act, as well as my assertion of the NSA privilege: 

A. (U) Information that may tend to confirm or deny whether 
the plaintiffs have been subject to any alleged NSA 
intelligence activity that may be at issue in this matter; and 



B. (U) Any information concerning NSA intelligence 

activities, sources, or methods that may relate to or be 
necessary to adjudicate plaintiffs' allegations, including 
allegations that the NSA, with the assistance of 
telecommunications carriers, indiscriminately intercepts the 
content of communications and also, to the extent 
applicable to plaintiffs' claim, the communications records 
of millions of Americans as part of an alleged “Program'’ 
authorized by the President after 9/1 L See. e.g., Amended 
Comply 1-8, 58, 

(U) The scope of this assertion includes but is not limited 
to: 



20 



2? 

23 

24 



(i) (U) Information concerning the scope and 
operation of the now inoperative ’‘Terrorist Surveillance 
Program" ("TSP”) regarding the interception of the content 
of certain one-end international communications 
reasonably believed to involve a member or agent of al- 
Qaeda or an affiliated terrorist organization, and any other 
information related to demonstrating that the NSA does not 
otherwise engage in the content surveillance dragnet that 
the plaintiffs allege; and 



2S 



26 

2? 

2 * 



proceedings^® 

JSee Classified In Camera , Ex Parte Declaration of LTG Keith B, 
Alexander 31 n.8, MDL No. 06-1 791-VPW (N.D. Cal) (submitted Apr. 20, 2007) (relating to 
all actions against the MCI and Verizon Defendants). 
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(li) (U) Any other information concerning NSA 
intelligence activities, sources, or methods that would be 
necessary to adjudicate the plaintiffs' claims, including, to 
the extern applicable, information that would tend to 
confirm or deny whether or not the NSA obtained from 
telecommunications companies communication 
transactional records; and 

(lii) (U) Information that may tend to confirm or 
deny whether any telecommunications carrier has provided 
assistance to the NSA in connection with any alleged 
activity, 

VI. (U) Description of Information Subject to Privilege and the Harm of Disclosure 

A. (U) Information That May Tend to Confirm or Deny Whether the PlaiofifTs Have 

Been Subject to Any Alleged NSA Activities 

30. (U) The first major category of information as to which I am supporting the DNTs 
assertion of privilege, and asserting the NSA's own statutory privilege, concerns information as 
to whether particular individuals, including the named plaintiffs in this lawsuit, have been 
subject to alleged NSA intelligence activities. As set forth below, disclosure of such information 
would cause exceptionally grave harm to the national security. 

3 1 . fTS/AFS ^/ S The named plaintiffs in this action - Virginia Shuberi, 
Noha Arafa, Sarah DranofT, and Hilary Botein - allege that the contents of their telephone and 
Internet comm unj cations were subject to “unlawful interception, search and seizure, and 
electronic surveillance," Amended Compl. ^ 87, in connection with a program of “dragnet" 
surveillance that captures the contents of “virtually every telephone, internet and/or email 



communication that has been sent from or received within the United States since 200?," id. 

UH 1 , 4. As set forth herein, the NSA does not engage in “dragnet" surveillance of the content of 
communications as plaintiffs allege, | 
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34. (U) As a matter of course, the NSA cannot publicly confirm or deny whether any 

individual is subject to surveillance activities because to do so would tend to reveal actual 



targets. For example, iTthe NSA were to confirm in this case and others that specific individuals 
are not targets of surveillance, but later refuse to comment (as it would have to) in a case 
involving an actual target, a person could easily deduce by comparing such responses that the 
person in the latter case is a target. The harm of revealing targets of foreign intelligence 
surveillance should be obvious. If an individual knows or suspects he is a target of US. 



h fTSvVSr bVOC/N F) 1 previously note d that NSA has estimated that it collects Internet 
metadata associated with approximately! 



illi n pect to telephon y meta data, I previously estimated that, 

23 prior to the 2006 FISC Order, about telephony meta data records was 

presented to an analyst for review, see Classified In Camera , Ex Pane Declaration of LTG Keith 

24 B. Alexander 27 (submitted May 25, 2007), and the scope of that disparity remains generally 
the same. 

25 
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intelligence activities, be would naturally tend to alter his behavior to take new precautions 
against surveillance. In addition, revealing who is not a target would indicate who has avoided 
surveillance and what may be a secure channel for communication. Such information could lead 
a person, secure in the knowledge that he is not under surveillance, to help a hostile foreign 
adversary convey information; alternatively, such a person may be unwittingly utilised or even 
forced to convey information through a secure channel. Revealing which channels are free from 
surveillance and which are not would also reveal sensitive intelligence methods and thereby 
could help any adversary evade detection and capitalize on limitations in NSA's capabilities. 




|, the underlying mela data collection 



could not be confirmed or denied without causing exceptionally grave damage to the national 
security. In particular, disclosure of whether the NS A currently receives plaintiffs' telephony or 
Internet meta data from any telecommunications companies would also violate specific 
provisions of the FISC Telephone Records and FISC Pen Register Orders. I 
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B. (U) Information Related to NSA Activities, Sources, or Methods Implicated by the 

Plaintiffs’ Allegations and the Harm to National Security of Disclosure 

1. (U) Plaintiffs’ Allegations of a Communications Dragnet 

36. (U) l am also supporting the DNl's assertion of privilege and asserting the NSA's 

sialuiory privilege over any other facts concerning NSA intelligence activities, sources, or 
methods that may relate to or be necessary to adjudicate the plaintiffs’ claims and allegations, 
including that (i) the NSA is indiscriminately intercepting the content of communications of 
millions of ordinary Americans, see, eg., Amended Compl. 1 -4, and (ii) to the extent relevant 
to this action, that the NSA is collecting the “call data” of people in the United States with the 
assistance of telecommunications carriers, presumably including information concerning the 
plaintiffs’ communications. See, e.g., id. ^ 5-8, 58. As described above, the scope of the 
government's privilege assertion includes but is not limited to: (1) facts concerning the operation 
of the now inoperative Terrorist Surveillance Program and any other NSA activities needed to 
demonstrate (hat the TSP was limited to the interception of the content of one-end foreign 
communications reasonably believed to involve a member or agent of al Qaeda or an affiliated 
terrorist organization and that the NSA does not otherwise conduct a dragnet of content 
surveillance as the plaintiffs allege; and (2) information concerning whether or not the NSA 
obtains transactional communications records from telecommunications companies. As set forth 
below, the disclosure of such information would cause exceptionally grave harm to national 
security. 
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37. (C) After the existence ofthel SP was officially acknowledged in December 
2005, Ihe Government stated that the NS A's collection of the content of communications under 
theTSP was directed at international communications in which a participant was reasonably 
believed to be associated with al Qaeda or an affiliated organization. Plainliffs' allegation that 
the NSA has undertaken indiscriminate surveillance of the content of millions of 
communications sent or received by people inside the United States after 9/1 1 under theTSP is 
therefore false, again as the Government has previously stated. 19 But to the extent the NSA must 
demonstrate that content surveillance was so limited, and was not plaintiffs’ alleged content 
dragnet, or demonstrate that the NSA has not otherwise engaged in the alleged content dragnet, 
highly classified NSA intelligence sources and methods about the operation of theTSP and NSA 
intelligence activities would be subject to disclosure or the risk of disclosure. The disclosure of 
whether and to what extent the NSA utilizes certain intelligence sources and methods would 
reveal to foreign adversaries the NS A’s capabilities, or lack thereof, enabling them to cither 
evade panicular channels of communications that are being monitored, or exploit channels of 
communications that are not subject to NSA activities - in either case risking exceptionally grave 
harm to national security. 

38. (U) The privileged information that must be protected from disclosure includes 
tbe following classified details concerning content surveillance under the now inoperative TSP. 

39. First, interception of the content of communications 
under the TSP was triggered by a range of information, including sensitive foreign intelligence* 

19 (U) See, e.g., Public Declaration of LTG Keith B. Alexander, Director, National 
Security Agency ^ 16 (submitted May 25, 2007). 

Classified In Camera. Ex Parte Declaration of Lt Gen. Keith 8. Alexander, Director, National Security Agency 

Virginia Shukert. et at v. United State* of America ct at (No 07-ev-693-VRW; MDl No. 06- H9I ) 













40. (TS//TS -P// S 4/ /0G/ N- F) Once the NSA determined that Ihere were reasonable 

grounds to believe that the target is a member or agent of al Qaeda or an affiliated terrorist 
organisation, the NSA look steps to focus (he interception on the specific al Qaeda-relaied target 
and on communications of that target that were to or from a foreign country. In this respect, ihe 



NSA's collection efforts we 



hat thcNSA had 



reasonable grounds to believe carry the ”one-end" foreign communications of members or agents 
ofal Qaeda or affiliated terrorist organizations. 
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43. NSA Look specific steps in the actual TSP 

interception process to minimize the risk that the communications of non-targets were 
intercepted. With respect to telephone communications* specific telephone numbers identified 
ttirough the analysis outlined above were( 

I so that the only communications 



intercepted were those to or from the targeted number of an individual who was reasonably 
believed to be a member or agent of al Qaeda or an affiliated terrorist organization. 

44. (T S //TS VffS I//0 C flKF) For ihe interception of the content oflntemet 

communications under the TSP, the NSA used identifying information obtained through its 
analysis of the target, such as email addresses to target for collection the 

communications of individuals reasonably believed to be members or agents of al Qaeda or an 
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| The NSA did not search the content of the 
communications with "key words" other than the targeted selectors 

themselves. Rather, the NSA targeted for collection only email addresses | 

| associated with suspected members or agents of al Qaeda or affiliated terrorist 
organizations, or communications in which such were mentioned. In 

addition, due to technical limitations of the hardware and software, incidental collection of non- 
target communications has occurred, and in such circumstances the NSA applies its 
minimization procedures to ensure that communications of non-targets are not disseminated. To 
the extent such facts would be necessary to dispel plaintiffs' erroneous conteni dragnet 
allegations, they could not be disclosed without revealing highly sensitive intelligence methods. 

45. -(T^ // TS P //Si //0€/N F) In addition to procedures designed to ensure that the TSP 

was limited to the international communications of al Qaeda members and affiliates, the NSA 
also took additional steps to ensure that the privacy rights ofU.S. persons were protected. | 
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I In short, there is no 

other “dragnet” program authorized by the President after 9/1 1 under which the NSA intercepts 
die content of virtually all domestic and international communications as the plaintiffs allege. 
Again, however, information about NS A content surveillance activities beyond the TSP could 
not be disclosed in order to address and rebut plaintiffs' allegation without rcvcalirxg specific 
NSA sources and methods and thereby causing exceptionally grave damage to national 
security. 23 



22 ffS //T 6 P//S1//OC/N -F ) To the extent relevant to this case, additional facts about the 
operational details of the TSP and subsequent FISA authorized content surveillance activities 
also could not be disclosed without exceptional harm to national security, including for example 
information that would demonstrate the operational swiftness and effectiveness of utilizing 
content surveillance in conjunction with the meta data activities. As noted,! 

TSP, in conjunction with meia data 
collection and analysis described herein, allowed the NSA to obtain rapidly not only the content 
of a particular communication, but connections between that target and others who may form a 
web of a) Qaeda conspirators. 
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(t>) (U) Other Classified Information Concerning NSA Activities 

48. p f -S //T S fV/S 1//OC/N F) To the extent lhal the plaintiffs’ “dragnet"’ allegations also 
implicate other NSA activities, such as the bulk collection of non-content communication meta 
data or the collection of communications records, see , e.g.. Amended Compi. 1 58, addressing 
their assertions would require disclosure of NSA sources and methods that would cause 
exceptionally grave harm to national security. As also explained herein, these colleciion 
activities are now subject to the orders and supervision of the FISC. 

49. ( I i *'1*' 'HI i As noted above, starling in October 2001 , and since 

2004 pursuant to the FISC Pen Register Order, the NSA collected bulk meta data associated with 
electronic communications I 











_ pursuant to the FISC Telephone Records Order, certain telecommunication companies 
provide the NSA with bulk telephony meta data in the form of call detail records derived from 
information kept by those companies in the ordinary course ofbusiness, See supra 25, 27. 

50. fFS//5l // O C/ N P) The bulk meta data collection activities that have been 
undertaken by the NSA since 9/1 1 are vital tools for protecting the United States from another 
catastrophic terrorist attack. Disclosure of these meta data activities, sources, or methods would 
cause exceptionally grave harm to national security It is not possible to target collection solely 
on known terrorist telephone or Internet identifiers and effectively discover the existence, 
location, and plans of terrorist adversaries. \~ 
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know ahead of time is exactly where. The ability to accumulate meta data substantially increases 
NSA l s ability io detect and identify these targets. One particular advantage of bulk meta data 
collection is that it provides a historical perspective on past contact activity that cannot be 
captured in the present or prospectively Such historical links may be vital to identifying new 
Utrgels, because the meta data may contain links that are absolutely unique, pointing to potential 



targets that otherwise would be missed. 



1 



ese sources and methods enable the NSA to segregate some of that very 
small amount of otherwise undetectable but highly valuable information from the overwhelming 
amount of other information that has no intelligence value whatsoever - in colloquial terms, to 
find at least some of the needles hidden m the haystack. If employed on a sufficient volume of 



raw data, contact chaining 
contacts that were previously unknown. 



can expose [ 



55. (T S //51//OC/NF) The foregoing discussion is not hypothetical. Since inception 

of the first FISC Telephone Business Records Order, NSA has provided 277 reports to the FBI. 
These reports have tipped a total of 2,900 telephone identifiers as being in contact with 



identifiers associated with 
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56. (T S // S I//OONF ) Accordingly, adjudication of plaintiffs’ allegations concerning 
the collection of non-content meta data and records about communication transactions would risk 



or require disclosure of critical NSA sources and methods for 



contacts of 



terrorist communications as well as the existence of current NSA activities under RSC Orders. 
Despite media speculation about these activities, official confirmation and disclosure of the 
N SA’s bulk collection and targeted analysis of telephony meta data would confirm to all of our 



foreign adversaries 



the existence of these critical intelligence 



capabilities and thereby severely undermine NSA’s ability to gather information concerning 

terrorist connections and cause exceptionally grave harm to national security. 25 

2. (TS//S 1/yOC/N F ) Information Concerning Current FISA Authorized 

Activities and Specific FISC Orders 

57, fFS/ZTS TY/ S I // OC/ N F) 1 am also supporting the DNFs state secrets privilege 

assertion, and asserting NSA's statutory privilege, over information concerning the various 



5 £W S 1/ /OC/NF ) In my prior classified declarations in this action, I set forth 

specific examples of how the intelligence sources and methods utilized by the NSA after the 97 1 1 
attacks, including content surveillance under the TSP and pursuant to subsequent FISA authority, 
as well as non-content meta data collection and analysis, have led to the development by the 
NSA of actionable intelligence and important counter- terrorism efforts. See, e.g.. Classified In 
Camera , Ex Parte Declaration of LTG Keith B. Alexander 35-43, 58-61 (submitted May 35, 
2007). To the extent that such information would be relevant to any litigation in this action, 
however, it could not be disclosed without revealing specific NSA intelligence information, 
sources, and methods, thereby causing exceptionally grave harm to national security, and lhat 
information remains subject to the government’s privilege assertion. 
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orders of the Foreign intelligence Surveillance Court mentioned throughout this declaration that 
authorize NSA intelligence collection activities, as well as N$A surveillance activities conducted 
pursuani to the now lapsed Protect America Act ( kV PAA ,y ) and current activities authorized by the 
FISA Amendments Acl of 2008, As noted herein, the three NSA intelligence activities initiated 
after the September 1 1 attacks to detect and prevent a further al Qaeda attack - (i) content 
collection of targeted al Qaeda and associated terrorist-related communications under what later 
was called the TSP; (ii) internet meta data bulk collection; and (iii) telephony meta data bulk 
collection - have been subject to various orders of the FISC (as well as FISA statutory authority) 
and are no longer being conducted under presidential authorization. The bulk collection of non- 
contcm transaciional data for Internet communications was first authorized by the FISC in the 
July 2004 FISC Pen Register Order, and the bulk collection of non-contem telephony meta data 
was first authorized by the FISC in May 2006. Hie existence and operational details of these 
orders, and of subsequent FISC orders reauthorizing these activities, remain highly classified and 
disclosure of this information would cause exceptionally grave harm to national security, 26 In 
addition, while the Government has acknowledged the general existence of the January 10, 2007 
FISC Orders authorizing electronic surveillance similar to that undertaken in the TSP, the 
content of those orders, and facts concerning the NSA sources and methods they authorize. 



26 fFSrHS&JG&NF) For this reason, the FJSC Telephone Business Records Order and 
FISC Pen Register Orders prohibit any person from disclosing to any other person that the NSA 
has sought or obtained the telephony meta data, other than to (a) those persons to whom 
disclosure is necessary to comply with the Order; (b) an attorney to obtain legal advice or 
assistance with respect to the production of meta data in response to the Order; or (c) other 
persons as permitted by the Director of the FBI or the Director's designee. The FISC Orders 
further provide that any person to whom disclosure is made pursuant to (a), (b), or (c) shall be 
subject to the nondisclosure requirements applicable to a person to whom the Order is directed in 
the same manner as such person. 
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cannot be disclosed without likewise causing exceptional harm to national security. Subsequent 
content surveillance sources and methods utilized by the NS A under the PAA and, currently, 
under the FISA Amendments Act of 2008 likewise cannot be disclosed. I summarize below the 
proceedings that have occurred under authority of the FISA or the FISC. 

58, (TS//3I//OC/NP) (a) internet Meta Data '. Pursuant to the FISC Pen Register 
Order, which has been reauthorized approximately every 00 day* after it was first issued, NS A is 
authorized to collect in bulk, from telecommunications carriers, metadata associated with 
electronic communi cations | 

The NSA is authorized to query the archived meta 
data collected pursuant to (he FISC Pen Register Order using email addresses for which there 
were facts giving rise to a reasonable, articulable suspicion that the email address was associated 
with The FISC Pen Register Order was most 

recently reauthorized 2009. and requires continued assistance by the providers 

through 2009 

59. TFS //S1//QC/NF^ (b) Telephony Meta Data : Beginning in May 2006, the NSA's 
bulk collection of telephony meta data, previously subject to presidential authorization, was 
authorized by the FISC Telephone Business Records Order. Like the FISC Pen Register Order, 
the FISC Telephone Business Records Order was reauthorized approximately every 90 days. 
Based on the finding that reasonable grounds existed that the production was relevant to efforts 
to protect against international terrorism, the Order required telecommunications earners to 
produce to the NSA 'call detail records" or ‘'telephony metadata" pursuant to 50 U.S.C. 
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§ t#6 1 [c] (authorizing the production of business records for, inter alia, an investigation to 
protect against international terrorism). Telephony meta data was compiled from call detail data 
maintained by the providers in the ordinary course of business that reflected non-content 
information such as the date, time, and duration of telephone calls, as well as the phone numbers 
used to place and receive the calls. The NSA was authorized hy the FISC to query the archived 
telephony meta data solely with identified telephone numbers for which there were facts giving 
rise to a reasonable, articulable suspicion that the number was associated withj 

| (that is, a '‘HAS" determination). The FISC Telephone Business 
Records Order was most recently reauthorized on September 3, 2009, with authority continuing 
until October 30, 2009. 

60. fT S/VS V f OCfN F) As noted above, see supra note 12, on January 1 5, 2009, the 
Department of Justice (“DOJ’*) submitted a compliance incident report related to the Business 
Records Order to the FISC, basod on information provided to DOJ by Ihe NSA, which indicated 
(hat the NSA’s prior reports to the FISC concerning implementation of the FISC Telephone 
Business Records Order had not accurately reported the extent to which NSA had been querying 
the telephony meta data acquired from carriers. In sum, this compliance incident related to a 
process whereby currently tasked telephony selectors (/.<?., phone numbers) reasonably believed 
to be associated with authorized counter terrorism foreign intelligence targets under Executive 
Order 12333 were reviewed against the incoming telephony metadata to determine if that 
number had been in contact with a number in the Untied Slates. This process occurred prior to a 
formal determination by NSA that reasonable, articulable suspicion existed that the selector was 
associated with and was not consistent with 
NSA's prior descriptions of the process for querying telephony meta data. 
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61. fFS//S4//OG^N-F> By Order dated March 2, 2009, the FISC directed that the NS A 
may continue to acquire call detail records of telephony meta data in accordance with the FISC 
Telephone Business Record Orders, but was prohibited from accessing data acquired except in a 
limited manner. In particular, the Government could request through a motion thai the FISC 
authorize querying of the telephony meta data for purposes of obtaining foreign intelligence on a 
I case-by-case basis (unless otherwise necessary to protect against imminent threat to human life, 
subject to report to the FISC the next business day). In addition, following the Government’s 
disclosures concerning compliance with the FISC Orders, the FISC imposed other obligations, 
including to report on its ongoing review of the matter and to file affidavits describing the 
continuing value of the telephony meta data collection to the national security of the United 
States and to certify that ihe information sought is relevant to an authorized investigation. The 
Government completed its end-to-end review and submitted ils report and the required affidavits 
to the FISC on August 3, 2009- In that report, the Government outlined the steps NSA bad taken 
to address and correct the instances of noncompliance with FISC Orders, as well as the remedial 
safeguards pul in place to monitor and ensure compliance with such Orders in the future. The 
FISC most recently renewed the Telephone Business Records Order on September 3, 2009. This 
latest renewal restored to NSA the authority to make RAS determinations on telephone 
identifiers nominated by NSA personnel lo use in conducting contact chainingH 



62. -fFSA 



NSA is committed to working with the FISC 



on this and other compliance issues to ensure that this vital intelligence tool works appropriately 
and effectively. For purposes of this litigation, and the privilege assertions now made by the 
DNl and by the NSA, the intelligence sources and methods described herein remain highly 



Classified In O mcra, £c Parle Declaration of U, Gen. Keith 0. Alexander, Director, National Security Agency 
Virginia Situbew* ct at. v. United States of dmenai, et a i (No. U7-cv-693-VRW; MDL No. 06-1791) 





















ciassified and the disclosure that 



would compromise vital NSA 



9 



16 

17 

19 

20 
2; 
22 
21 

24 

25 

26 
27 
2R 



sources and methods and result in exceptionally grave harm to national security. 

63. qS//TSP// SI //OC/ftn (cl Content Collection : On January 1 0, 2007, the RSC 
issued orders authorizing the Government to conduct certain electronic surveillance that had 
been occurring under the TSP. Those Order* included! 




‘‘Foreign Telephone and Email Order/' which 
authorized, inter alia , electronic surveillance of telephone and Internet communications | 

here the Government determined that there was probable 
cause to believe that (!) one of the communicants is a member or agent of| 

and (2) the communication is to or from a foreign country ( i.e 
a one-end foreign communication to or from the United States), Thereafter, any electronic 
surveillance that was occurring as part of theTSP became subject to the approval of the FISA 
Court and the TSP was not reauthorized, 27 
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64. -fP&Vfi j //OC/N F 3 The Foreign Telephone and Email Order remained in effect 
until the Protect America Act (“PAA") was enacted in August 2007. Under the PAA, the EISA's 
definition of ‘'electronic surveillance" was clarified to exclude ‘'surveillance directed at a person 
reasonably believed to be located outside the United States.” 50 U,S.C. § 1 805A. The PAA 
authorized the DN1 and the Attorney General to jointly “authorize the acquisition of 

foreign intelligence information concerning persons reasonably believed lo be OHtside the 
United States” for up to one year, id § 1 805 B(a), and to issue directives lo communications 
service providers requiring them to “immediately provide the Government with all informal ion, 
facilities, and assistance necessary to accomplish the acquisition 1 ' of necessary intelligence 
information, id. § 180SB(e). Such directives were issued to telecommunications companies and 
the NSA conducted conient surveillance of overseas targets under the PAA through their 
facilities. 

65. (T S- // S4 / / O Beginning in September 2008, expiring directives that had been 
issued under the PAA for conient surveillance of overseas targets (including surveillance of 



specificl 



targets overseas) were replaced by new directives for such surveillance 



issued pursuant to the RSA Amendments Act of 2008. Title 1 of the FISA Amendments Act of 
2008 authorizes the targeting of persons outside of the United States without individual FISC 
orders but subject to directives issued to carriers by the Director of National Intelligence and the 
Attorney General under Section 702(h) of the Ff$A for the continuation of overseas surveillance 




Classified In Camera, Ex Forte Decbrenon of Li. Gen Kdih B Alexander. Dirmor, Katiorv^l Seounry Agency 
Virginia Shubert, vi al ^ United Siotc.\ of Anieriva, ct at. (No 07-cv*693-V It W; MDL So. 06-1791) 

■CON/NOrOKN 



2 

3 

4 

5 

6 
1 
8 
9 
W 
1 1 
12 
1 ?. 

14 

15 

16 
17 
IB 
16 
20 
21 
22 
n 

24 

25 

26 

27 

28 




1 




21 

22 28 (T S//TSP//Sl-^^^^¥e€/NF) On September 1 9. 2008, then- Attorney General 
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VM. (TJ) Risks of Allowing Litigation to Proceed 



77. -fPS / flFS U pon examination of the allegations, claims, 

facts, and issues raised by this case, it is my judgment that sensitive state secrets are so central to 
the subject matter or- the litigation that any attempt to proceed will substantially risk the 
disclosure of the privileged state secrets described above. Although plaintiffs’ alleged content 
surveillance dragnet docs not occur, proving why that is so, 

^ ,fCC ^ implicate highly classified 

intelligence information and activities. Similarly, to the extent the plaintiffs’ “dragnet” 
allegation implicates the bulk collection of non-convent information and records containing 
transactional meta data about communications, addressing the plaintiffs’ claims would also 
compromise currently operative NS A sources and methods that are essential to protecting 
national security, including for detecting and preventing a terrorist attack. | 



In my judgment, any effort to probe the outer-bounds of such 
classified information would pose inherent and significant risks of the disclosure of that 



See Classified In Camera, Ex Parte Declaration of Deborah A. 
fionanni, National Security Agency 78-79, Jewel v. NSA , 08-cv-43?3-VRW (submitted Apr. 
3,2009). 
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information, including critically sensitive information about NSA sources, methods, operations, 
targets, Indeed, any effort merely to allude to those facts in a non- classified 

fashion could be revealing of classified details that should not be disclosed. Liven seemingly 
minor or innocuous facts, in the coniext of this case or other non-classified information, can tend 
to reveal, particularly to sophisticated foreign adversaries, a much bigger picture of U.S. 
intelligence gathering sources and methods. 

78. (TS//SLW E r ) The United States has an overwhelming interest in detecting and 
thwarting further mass casually attacks by a) Qaeda. The United States has already suffered one 
attack that killed thousands, disrupted the Nation's financial center for days, and successfully 
struck at the command and control center for the Nation’s military. A I Qaeda continues to 
possess the ability and clear, stated intent to carry out a massive attack in the United States that 
could result in a significant loss of life, as well as have a devastating impact on the U.S. 
economy. According to the most recent intelligence analysis, attacking the U.S. Homeland 
remains one of al Qaeda's top operational priorities, <>ee Classified In Camera Ex Parte 
Declaration of Admiral Dennis C, Blair, Director of National Intelligence, and al Qaeda will 
keep h-ying for high- impact attacks as long as its centra! command structure is functioning and 
affiliated groups are capable of furthering its interests. 

79. fFS^- SV^ N F ) A I Qaeda seeks to use our own communications infrastructure 
against us as they secretly attempt to infiltrate agents into the United States, waiting to attack at a 
time of their choosing. One of the greatest challenges the United States confronts in the ongoing 
effort to prevent another catastrophic terrorist attack against the Homeland is the critical need to 
gather intelligence quickly and effectively. Time is of the essence in preventing terrorist attacks, 
and the government faces significant obstacles in finding and tracking agents of al Qaeda as they 
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manipulate modem technology in an attempt to communicate while remaining undetected. The 
KSA sources, methods, and activities described herein are vital tools in this effort. 

VUl. (U) Conclusion 

80. (TJ) In sum, I support the DNTs assertion of the state secrets privilege and 
statutory privilege to prevent the disclosure of the information described herein and detailed 
herein. I also assert a statutory privilege under Section 6 of the National Security Agency AU 
with respect to the information described herein that concerns the functions of the N$A. Public 
disclosure of the aforementioned intelligence sources, methods and activities could reasonably be 
expected to cause exceptionally grave harm to the national security of the United States. 
Consequently, because proceedings in this case risk disclosure of privileged and classified 
intelligence -related information, 1 respectfully request that the Court not only protect that 
information from disclosure but also dismiss this case to prevent exceptionally grave harm to the 
national security of the United States, 
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1 declare under penalty of perjury that the foregoing is true and correct. 




KEITH B. ALEXANDER 

LTG, USA 

Director 

National Security Agency 
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